KR20130098731A - Card payment system and card payment method considering security of wire and wireless network - Google Patents

Abstract

PURPOSE: A card payment system considering the private security in a wire and wireless network-based environment and a card payment method thereof are provided to strengthen the security of the payment of the card by comparing electronic signature information inputted at the card payment of a client with registered signature information registered in advance before confirming the card owner through the confirmation of an authentication number. CONSTITUTION: A store terminal (100) includes a signature pad (110) for inputting an electronic signature. A card company server (300) approves or refuses the card payment requested from the store terminal. A security company server (500) compares an electronic signature inputted from the signature pad with preregistered electronic signature or compares transmitted arbitrary authentication number with an authentication number transmitted from the store terminal. The security company server provides the approval or refusal information of the card payment to the card company server. [Reference numerals] (100) Store terminal; (110) Signature pad; (300) Card company server; (500) Security company server; (600) Mobile communication service provider server; (700) Customer mobile communication device; (AA) Credit card; (BB) Network

Description

Card payment system and card payment method considering personal security in wired / wireless network based environment {CARD PAYMENT SYSTEM AND CARD PAYMENT METHOD CONSIDERING SECURITY OF WIRE AND WIRELESS NETWORK}

The present invention relates to a card payment system and a card payment method for enhancing security by performing an IC credit card, a check card, and a debit card through a merchant terminal, through a cardholder's identity verification procedure.

With the rapid development of information processing technology and the expansion of electronic payment infrastructure, card media such as IC credit cards, debit cards and check cards, and card payment terminals such as CAT and POS, as well as payment agencies that connect them through a network (VAN) Electronic payment systems, which pay for goods or services through private companies, have become commonplace today.

When a credit card transaction occurs, the credit card merchant scans the credit card presented by the customer (credit card user) using the card payment terminal to read the information, and inputs payment information such as the transaction amount and the installment month number for the transaction. The card payment terminal accesses a Bansa server that connects each credit card company through a public switched telephone network (PSTN) or the Internet network, and requests transaction approval by transmitting credit card information and transaction history information. After receiving the approval number for authenticating the transaction approval from the bansa server, and outputting the sales slip, the customer undergoes a signature for proof of the transaction.

In this way, the card payment method of signing the sales slip (receipt) printed when the card is paid by hand is introduced, and each card merchant compares the signature entered by hand with the signature on the back of the card to confirm that the user is the card holder. You will be confirmed.

This visual control method has a problem in that the comparison result is subjective because the signature control subject is a human, and therefore, it is impossible to accurately determine whether the card is illegally used.

In addition, there is a problem that the identity verification as described above is not practical in a merchant that is settled in a short time to a large number of customers, such as large discount stores. In other words, when the card payment is made in most affiliated stores, only the signature on the sales slip is received by hand, and the check against the signature on the back of the card is omitted, thereby preventing the illegal use of the card.

In recent years, digital signatures are used to manage signatures instead of writing instruments for the convenience of signatures, which have been applied to credit card payment systems. Has been signed by the customer.

However, the electronic signature method also has a problem in that the verification process of the signature printed on the sales slip and the signature on the back of the card may have difficulty in verifying the identity of the card user, thereby vulnerable to card fraud.

The present invention was devised to solve the conventional problems as described above, the card payment system considering the personal security in a wired and wireless network-based environment that can reduce the damage caused by the use of the stolen card by strengthening the security compared to the existing And to provide a card payment method.

In order to achieve the above object, a card payment system considering personal security in a wired / wireless network based environment of the present invention includes a sign pad for inputting an electronic signature, and a card payment such as a credit card, a debit card, or a check card. Merchant terminal is installed in the merchant for; A card company server for approving or rejecting the card payment requested from the merchant terminal; Upon requesting the card approval of the affiliated terminal, it is determined whether the electronic signature input through the sign pad matches the registered electronic signature, or whether the random authentication number sent and the authentication number transmitted from the affiliated terminal are determined. And a security company server providing the card company's approval or rejection information to the card company server.

According to the request of the security company server, it may be configured to further include a mobile communication server for transmitting the arbitrary authentication number to the customer mobile communication terminal.

The security company server database for receiving and storing the pre-registered electronic signature information from the card company server; A registered signature information search unit for searching the registered digital signature information from card identification information among card information included in the card payment request of the affiliated store terminal; A signature comparison decision unit determining whether the electronic signature input through the sign pad matches the previously registered electronic signature information; Authentication number sending unit for sending the arbitrary authentication number to the customer mobile communication terminal; An authentication number determination unit for determining a match between the authentication number sent through the authentication number sending unit and the authentication number input through the affiliated store terminal; It may be configured to include; an admission control unit for controlling the approval and rejection of the card payment, according to the result of the signature comparison decision unit and the authentication number determination unit.

The customer mobile communication terminal has a near-contact contact with the RFID chip embedded in the card requesting the card payment, and has a card positioning module for retrieving the card identification number of the card, the security company server is the card positioning module Card position determination unit for determining whether the card requesting the card payment and the customer mobile communication terminal is located within a certain range by comparing the card identification number retrieved through the card identification number of the card input through the merchant terminal when the card payment request; It can be configured to include more.

On the other hand, the card payment method in consideration of personal security in the wired and wireless network-based environment of the present invention comprises the steps of: a) the merchant terminal requesting the card payment authorization to the security company server; b) transmitting, by the merchant terminal, the electronic signature input through a sign pad to the security company server; c) determining, by the security company server, whether the electronic signature received from the affiliated store terminal matches the registered electronic signature; d) when the received electronic signature and the registered terminal coincide with each other, transmitting, by the security company server, the authorization information of the card payment to the card company server; e) if the received digital signature and the registered terminal is inconsistent with each other, the security company server transmitting a random number to the customer mobile communication terminal; f) transmitting the authentication number inputted by the affiliated store terminal to the security company server; g) determining, by the security company server, whether the authentication number from the affiliated store terminal matches the sent authentication number; h) when the authentication number from the affiliated store terminal and any sent authentication number match, the security company server transmitting the authorization information of the card payment to the card company server; i) if the authentication number from the affiliated store terminal and the random authentication number sent are inconsistent, requesting a re-entry of the electronic signature to the affiliated store terminal by the security company server.

In step g), if there is a third inconsistency between the authentication number from the affiliated store terminal and the random authentication number sent, the security company server transmits the rejection information of the card payment to the card company server, and uses the card fraudulently. And a card rejection message regarding the to the mobile communication terminal.

On the other hand, the card payment method in consideration of personal security in the wired and wireless network-based environment of the present invention comprises the steps of: a) the merchant terminal requesting the card payment authorization to the security company server; b) transmitting, by the merchant terminal, the electronic signature input through a sign pad to the security company server; c) determining, by the security company server, whether the electronic signature received from the affiliated store terminal matches the registered electronic signature; d) when the received electronic signature and the registered terminal coincide with each other, transmitting, by the security company server, the authorization information of the card payment to the card company server; e) if the received digital signature and the registered terminal is inconsistent with each other, the security company server transmitting a random number to the customer mobile communication terminal; f) transmitting the authentication number inputted by the affiliated store terminal to the security company server; g) determining, by the security company server, whether the authentication number from the affiliated store terminal matches the sent authentication number; h) requesting card location information from the security company server if the authentication number from the affiliated store terminal matches any sent authentication number; i) if the authentication number from the affiliated store terminal and any sent authentication number do not match, requesting the merchant terminal to re-enter the electronic signature; j) searching, by the customer mobile communication terminal, a card identification number of a range of cards, and transmitting a card identification number corresponding to the card used for the card payment request among the searched card identification numbers to the security company server; k) the card and the customer mobile communication terminal compares the card identification number transmitted from the customer mobile communication terminal with the card identification number of the card requested by the merchant terminal to match the card and the customer mobile communication terminal. Determining whether it is located within; l) when the security company server determines that the card and the customer mobile communication terminal are located within a predetermined range of each other, transmitting authorization information of a card payment to the card company server; m) If the security company server determines that the card and the customer mobile communication terminal is not located within a certain range of each other, the security company server transmits the rejection information of the card payment to the card company server, Characterized in that the card rejection message is transmitted to the customer mobile communication terminal.

In step g), if there is a third inconsistency between the authentication number from the affiliated store terminal and the random authentication number sent, the security company server transmits the rejection information of the card payment to the card company server, and uses the card fraudulently. And a card rejection message regarding the to the mobile communication terminal.

According to the present invention described above, not only compares the digital signature information entered during the card payment of the customer with the registered registration information, but also through the identification of the card owner through the verification of the authentication number, the security of the card payment is enhanced It has the effect of preventing the use of stolen cards.

In addition, since the customer's card and the smartphone communicates with each other to determine whether the card exists within a certain radius of the smartphone and the card positioning process, the security of the card payment is further enhanced, thereby preventing card fraud. There is.

1 is a block diagram of a payment system considering personal security in a wired / wireless network based environment according to an embodiment of the present invention.
Figure 2 is a block diagram of a security company server of Figure 1,
3 is a configuration diagram showing another embodiment of FIG.
4 is a configuration diagram of a customer mobile communication terminal according to the security company server of FIG.
5 is a flowchart illustrating a card payment method considering personal security in a wired / wireless network based environment according to an embodiment of the present invention.
6 is a flowchart illustrating a card payment method considering personal security in a wired / wireless network based environment according to another embodiment of the present invention.

Hereinafter, a payment system according to an embodiment of the present invention will be described with reference to FIGS. 1 to 4.

Referring to FIG. 1, a payment system considering personal security in a wired / wireless network based environment includes an affiliated store terminal 100, a card company server 300, a security company server 500, a mobile carrier server 600, and a customer movement. It includes a communication terminal 700.

The merchant terminal 100, the card company server 300, the security company server 500, and the mobile communication company server 600 is connected to each other by a wired / wireless network such as the Internet network, and communicate with the mobile communication company server 600 The customer mobile communication terminal 700 is connected to each other by a mobile communication network to communicate.

The affiliated store terminal 100 is installed in the affiliated store, and has a sign pad 110 that electrically receives a credit card user's signature and converts it into an electronic signature in the form of an image. In addition, it is equipped with an EMV (Contract: IC, Contractless: RF), card reader (MSR), etc. to enable payment and payment processing (issue receipt) has a configuration capable of all kinds of credit settlement commonly used.

The card company server 300 includes a credit information database including credit information including rotation information of registered members and credit card numbers and passwords of issued cards, a payment history database for establishing payment details, and a bansa server 200. ), The payment approval chore is approved or rejected through a certain procedure.

The security company server 500 compares whether the electronic signature of the card user inputted through the sign pad 110 of the merchant terminal 100 and the pre-registered electronic signature information match or randomly with the user's mobile communication terminal 700. By sending the authentication number of the, and compares the authentication number entered through the merchant terminal 100 through the authentication process, the card company server 300 can provide information regarding the approval or rejection for the card payment approval request. .

Referring to FIG. 2, the security company server 500 includes a signature reading module 510, an authentication number reading module 520, and an admission controller 530.

The signature reading module 510 is for comparing the electronic signature of the card user inputted through the sign pad 110 of the merchant terminal 100 with the registered electronic signature information, and the database 511 and the registered signature information. The search unit 513 and the signature comparison decision unit 515 are included.

The database 511 may receive and store pre-registered electronic signature information from the card company server 300 related to card approval. The pre-registered digital signature information is a kind of original control of the electronic signature input when the user pays the card, and the electronic signature information of the user who was registered before the time of requesting the card approval or the card signature request is registered. Can be. At this time, the database 511 may store the electronic signature information registered according to the user identification information of the card.

The registration signature information retrieval unit 513 may search the electronic signature information registered according to the user identification information included in the card information when requesting the payment approval of the affiliated store terminal 100.

The signature comparison decision unit 515 compares the pre-registered digital signature information retrieved by the registered signature information search unit 513 with the electronic signature input through the sign pad 110 of the affiliated store terminal 100 to determine whether there is a match. can do. At this time, whether or not a match may be comprehensively considered in analyzing various patterns, and a pattern matching algorithm such as KMP (Knuth-Morris-Pratt), BM (Boyer-MOORE) or Horspool may be used.

The authentication number reading module 520 includes an authentication number sending unit 521 and an authentication number determining unit 523.

The authentication number sending unit 521 may request the mobile communication company server 600 to send an arbitrary authentication number to the customer mobile communication terminal 700 using the phone number of the card user transferred from the card company server 521.

The authentication number determination unit 523 determines whether the authentication number input through the affiliated store terminal 100 matches the authentication number sent through the authentication number sending unit 521.

The admission control unit 530 provides the card company server 300 with information regarding the approval or rejection of the card payment according to the result of the signature comparison decision unit 515 and the authentication number determination unit 523.

Specifically, when the result of the signature comparison decision unit 515 is a matching value (meaning that the input digital signature and the pre-registered electronic signature information is the same), the card company server 300, the card corresponding to the card company 300; Provide information about the approval of the payment.

On the other hand, the approval control unit 530, when the result of the signature comparison decision unit 515 is an inconsistency value (meaning that the input digital signature and pre-registered digital signature information is inconsistent), the authentication number sending unit 521 is a customer The control unit sends an arbitrary authentication number to the mobile communication terminal 700, and the approval control unit 530 sends the authentication number and the authentication number input to the match value {the merchant terminal 100, the result of the authentication number determination unit 523 When the authentication number sent from the unit 521 is matched}, the card company server 300 provides information on the approval of the card payment, and the result of the authentication number determination unit 523 is a mismatch value {the merchant terminal. When the authentication number entered in the 100 and the authentication number sent by the authentication number sending unit 521 means that there is a mismatch}, the merchant terminal 100 may request to re-enter the electronic signature.

If the result of the signature comparison decision unit 515 and the authentication number determination unit 523 does not match three times, the admission control unit 530 rejects the payment approval due to the card misuse by the customer mobile communication terminal 700. The mobile communication company server 600 may request to transmit the notification message. In addition, the admission control unit 530 provides information regarding the refusal of the card payment to the card company server 300 when the discrepancy results from the authentication number determination unit 523 three times.

The mobile carrier server 600 is connected to the security company server 500 by the network 600, and sends a certification number to the customer mobile communication terminal 700 at the request of the security company server 500, or refuses payment. You can send a notification message.

The customer mobile communication terminal 700 may be configured as a mobile phone and a smart phone, such as 2G, 3G, 4G owned by the card user typically receives payment details when using the card.

Hereinafter, a description will be given of a card payment method considering personal security in a wired / wireless network based environment according to an embodiment of the present invention with reference to FIGS. 1, 2, and 5.

The merchant terminal 100 requests the card payment to the security company server 500 (S10), and transmits the electronic signature input from the sign pad 110 of the merchant terminal 100 to the security company server 500 (S20). ).

The signature reading module 510 of the security company server 500 reads whether the electronic signature input through the sign pad 110 and the registered electronic signature information match (S30).

The authorization controller 530 of the security company server 500 provides the card company server 300 with information regarding the approval of the card payment when the inputted electronic signature and the registered electronic signature information match. Accordingly, the card company server 300 transmits the card payment approval information to the affiliated store terminal 100 to receive a receipt (S40).

In addition, the approval control unit 530 of the security company server 500 is random to the customer mobile communication terminal 700 through the authentication number sending unit 521 when the input digital signature and the pre-registered electronic signature information is inconsistent. Transmit the authentication number (S50).

In this case, when the customer checks the authentication number received by the customer mobile communication terminal 700 and inputs the authentication number to the affiliated store terminal 100, the affiliated store terminal 100 receives the inputted authentication number from the security company server 500. It transmits to (S60).

The authentication number determination unit 523 of the security company server 500 determines whether the authentication number input to the affiliated store terminal 100 and the authentication number sent by the authentication number sending unit 521 match (S70).

The authorization control unit 530 of the security company server 500 provides the card company server 300 with information regarding the approval of the card payment when the input authentication number and the sent authentication number match. Accordingly, the card company server 300 transmits the card payment approval information to the affiliated store terminal 100 to receive a receipt (S40).

In addition, the approval control unit 530 of the security company server 500, if the input authentication number and the sent authentication number is inconsistent, it requests the merchant terminal 100 to re-enter the electronic signature (S80).

In this case, the card user can re-enter the electronic signature through the sign pad 110 of the merchant terminal 100, the merchant terminal 100 transmits the re-entered electronic signature to the security company server 500 ( S10), the security company server 500 determines whether or not match with the re-registered electronic signature information again using the re-entered electronic signature (S30), if the match, payment approval information to the card company server 300 When transmitting (S40), if there is a mismatch, the authentication number reading procedure (S50, S60, S70) can be performed through the authentication number reading module 520.

The security company server 500 sends the information regarding the rejection of the card payment to the card company server 300 when three discrepancies occur in the digital signature reading procedure (S20, S30) and the authentication number reading procedure (S50, S60, S70). Providing and transmitting a notification message regarding payment refusal to the customer mobile communication terminal 700 (S90).

As described above, the present invention can determine whether the user who requested the card approval through the digital signature reading procedure (S20, S30) and the authentication number reading procedure (S50, S60, S70) is the card owner, thereby enhancing security You can prevent use.

Meanwhile, referring to FIGS. 3 and 4, in the card payment system of the present invention, the security company server 500 ′ may further include a card position determining unit 540, and the customer mobile communication terminal 700 may have a card. Positioning module 710 may be provided.

The authorization control unit 530 ′ requests the card location information from the affiliated store terminal 100 when the authentication number reading result from the authentication number reading module 520 is matched. Accordingly, the affiliated store terminal 100 requests the card user. The contents requesting the card location information may be displayed for checking.

The card location determiner 540 may receive from the customer mobile communication terminal 700 whether the payment request card and the customer mobile communication terminal 700 are located within a predetermined range.

If the payment request card and the customer mobile communication terminal 700 is located within a certain range through the card position determination unit 540, the approval controller 530 'provides information on the approval of the card payment to the card company server 300. can do.

To this end, the card positioning module 710 may be implemented as an application installed in a smartphone, and includes a card information register 711, a card information DB 713, and a card position search unit 715.

The card information register 711 receives card information of various cards and stores the card information in the card information DB 713. The card information may include a unique card identification number.

The card location search unit 715 may perform short-range contactless communication with the RFID chip embedded in the card to search for a card in a predetermined range among the cards stored in the card information DB 713 through a unique card identification number. In the present embodiment, the card location search unit 715 may search for a card within a range of 3 meters with the customer mobile communication terminal 700.

Customer mobile communication terminal 700 according to the operation instruction of the card payment request user, the card identification number of the card used in the card payment request of the card identification number retrieved through the card location search unit 715 security company server (500 ' ) Can be sent.

As described above, the card user checks the card location information request displayed on the affiliated store terminal 100, and uses the customer's mobile communication terminal 700 to transmit the card identification number of the retrieved card to the security company server 500 '. Can transmit

Hereinafter, referring to FIGS. 1, 3, 4, and 6, the card position determining unit 540 of the security company server 500 ′ and the card position checking module of the customer mobile communication terminal 700 ( A card payment method using a card payment system added with 710 will be described.

Steps S10 to S70 are the same, but in step S70, the authentication number determination unit 523 of the security company server 500 is the authentication number entered in the merchant terminal 100 and the authentication number sent by the sending authentication unit 521 By determining whether the numbers match, the approval controller 530 of the security company server 500 requests the card location information to the affiliated store terminal 100 when the input authentication number and the sent authentication number match. S71),

The card used for payment of the card among the card identification numbers searched by the card location search unit 715 of the customer mobile communication terminal 700 according to the card user's operation command confirming the card location information request displayed on the merchant terminal 100. The card identification number of the security company server 500 transmits to the card position determination unit 540 (S73).

The card position determination unit 540 of the security company server 500 matches the card identification number transmitted from the customer mobile communication terminal 700 and the card identification number of the card used for card payment through the affiliated store terminal 100. By checking, it is determined whether the card used for card payment and the customer mobile communication terminal 700 are located within a predetermined range (S75).

If the card position determining unit 540 determines that the card used for card payment and the customer mobile communication terminal 700 are located within a certain range, the approval control unit 530 ′ is related to the approval of the card payment to the card company server 300. Provide information. Accordingly, the card company server 300 transmits the card payment approval information to the affiliated store terminal 100 to receive a receipt (S40).

On the other hand, if the card position determination unit 540 determines that the card used for card payment and the customer mobile communication terminal 700 are not located within a predetermined range, the approval controller 530 'pays the card to the card company server 300. Provides information about the refusal of the, and can send a notification message about the refusal of payment to the customer mobile terminal 700 (S90).

In addition, in step S70, the authentication number determination unit 523 of the security company server 500 determines whether or not the authentication number entered in the merchant terminal 100 and the authentication number sent by the authentication number sending unit 521 The admission control unit 530 of the security company server 500 proceeds to step S80 when the input authentication number and the sent authentication number do not match.

As described above, in the present invention, the user who requests the card approval through the digital signature reading procedure (S20, S30), the authentication number reading procedure (S50, S60, S70), and the card location reading procedure (S71, S73, S75) You can verify that you are the owner, making your security even more secure and thus preventing card fraud.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It will be understood by those skilled in the art that many changes and modifications of the present invention can be made without departing from the spirit and scope of the appended claims. Accordingly, all such appropriate modifications and changes, and equivalents thereof, should be regarded as within the scope of the present invention.

100.Merchant Terminal
110 ... Sine Pad
300.Card company server
500 ... Security Vendor Server
510 ... Signature reading module
511 ... database
513 ... Registered Signature Information Search Division
515.Signature Comparison
520 ... Authentication number reading module
521.Certification Number
523 ... Certification number determination
530,530 '... approved control
540.Card position determination unit
600 ... Carrier Server
700 customer's mobile terminal
710 ... Authentication number confirmation module
711 ... Card Information Register
713 ... Card Information DB
715 ... Card Location Search

Claims (8)

An affiliated store terminal having a signature pad for inputting an electronic signature and installed in an affiliated store for card payment such as an IC credit card, a debit card, or a check card;
A card company server for approving or rejecting the card payment requested from the merchant terminal;
Upon requesting the card approval of the affiliated terminal, it is determined whether the electronic signature input through the sign pad matches the registered electronic signature, or whether the random authentication number sent and the authentication number transmitted from the affiliated terminal are determined. And a security company server providing the card company's approval or rejection information to the card company's server.
The method of claim 1,
The card payment system, characterized in that further comprising a mobile communication server for transmitting the arbitrary authentication number to the customer mobile communication terminal at the request of the security company server.
The method of claim 2, wherein the security company server
A database for receiving and storing the pre-registered electronic signature information from the card company server;
A registered signature information search unit for searching the registered digital signature information from card identification information among card information included in the card payment request of the affiliated store terminal;
A signature comparison decision unit determining whether the electronic signature input through the sign pad matches the previously registered electronic signature information;
Authentication number sending unit for sending the arbitrary authentication number to the customer mobile communication terminal;
An authentication number determination unit for determining a match between the authentication number sent through the authentication number sending unit and the authentication number input through the affiliated store terminal;
And an admission control unit for controlling the approval and rejection of the card payment according to the result of the signature comparison decision unit and the authentication number determination unit.
The method of claim 3, wherein
The customer mobile communication terminal is provided with a card positioning module for searching the card identification number of the card by short-range contactless communication with the RFID chip embedded in the card requesting the card payment,
The security company server
It is determined whether the card requesting the card payment and the customer mobile communication terminal are located within a predetermined range by comparing the card identification number searched through the card position checking module with the card identification number of the card inputted through the affiliated store terminal when the card payment request is made. Card payment system further comprises a card position determination unit.
a) requesting the merchant terminal to approve the card payment from the security company server;
b) transmitting, by the merchant terminal, the electronic signature input through a sign pad to the security company server;
c) determining, by the security company server, whether the electronic signature received from the affiliated store terminal matches the registered electronic signature;
d) when the received electronic signature and the registered terminal coincide with each other, transmitting, by the security company server, the authorization information of the card payment to the card company server;
e) if the received digital signature and the registered terminal is inconsistent with each other, the security company server transmitting a random number to the customer mobile communication terminal;
f) transmitting the authentication number inputted by the affiliated store terminal to the security company server;
g) determining, by the security company server, whether the authentication number from the affiliated store terminal matches the sent authentication number;
h) when the authentication number from the affiliated store terminal and any sent authentication number match, the security company server transmitting the authorization information of the card payment to the card company server;
i) if the authentication number from the merchant terminal and the random authentication number sent, the security company server requesting to re-enter the electronic signature to the merchant terminal; card payment method comprising a .
The method of claim 5, wherein
In step g), if there is a third inconsistency between the authentication number from the affiliated store terminal and the random authentication number sent, the security company server transmits the rejection information of the card payment to the card company server, and uses the card fraudulently. Card payment method characterized in that for transmitting to the customer mobile communication terminal.
a) requesting the merchant terminal to approve the card payment from the security company server;
b) transmitting, by the merchant terminal, the electronic signature input through a sign pad to the security company server;
c) determining, by the security company server, whether the electronic signature received from the affiliated store terminal matches the registered electronic signature;
d) when the received electronic signature and the registered terminal coincide with each other, transmitting, by the security company server, the authorization information of the card payment to the card company server;
e) if the received digital signature and the registered terminal is inconsistent with each other, the security company server transmitting a random number to the customer mobile communication terminal;
f) transmitting the authentication number inputted by the affiliated store terminal to the security company server;
g) determining, by the security company server, whether the authentication number from the affiliated store terminal matches the sent authentication number;
h) requesting card location information from the security company server if the authentication number from the affiliated store terminal matches any sent authentication number;
i) if the authentication number from the affiliated store terminal and any sent authentication number do not match, requesting the merchant terminal to re-enter the electronic signature;
j) searching, by the customer mobile communication terminal, a card identification number of a range of cards, and transmitting a card identification number corresponding to the card used for the card payment request among the searched card identification numbers to the security company server;
k) the card and the customer mobile communication terminal compares the card identification number transmitted from the customer mobile communication terminal with the card identification number of the card requested by the merchant terminal to match the card and the customer mobile communication terminal. Determining whether it is located within;
l) when the security company server determines that the card and the customer mobile communication terminal are located within a predetermined range of each other, transmitting authorization information of a card payment to the card company server;
m) If the security company server determines that the card and the customer mobile communication terminal is not located within a certain range of each other, the security company server transmits the rejection information of the card payment to the card company server, Card payment method, characterized in that for transmitting a card rejection message to the customer mobile communication terminal.
The method of claim 7, wherein
In step g), if there is a third inconsistency between the authentication number from the affiliated store terminal and the random authentication number sent, the security company server transmits the rejection information of the card payment to the card company server, and uses the card fraudulently. Card payment method characterized in that for transmitting to the customer mobile communication terminal.

Images